do not keep composer.lock